CV
Download Professional Background (PDF)
Dr. Martin has testified nineteen times, including thirteen depositions, four trials, and two evidentiary hearings.
Education
Ph.D. Computer Science, Johns Hopkins University, Baltimore, MD (2011-2016) Dissertation: “Securing Medical Devices and Protecting Patient Privacy in the Technological Age of Healthcare” Doctoral advisor: Dr. Aviel D. Rubin
M.S.E. Computer Science, Johns Hopkins University, Baltimore, MD (2011-2013)
B.S. Computer Science, Johns Hopkins University, Baltimore, MD (2007-2011)
Professional Experience
Chief Scientist, Harbor Experts (2024-Present)
Lecturer, Johns Hopkins University (2023-Present)
Vice President of Applied Research and Technology, Harbor Labs (2023-2024)
Director of Firmware Security / Senior Research Scientist, Harbor Labs (2018-2024)
Research Scientist, Harbor Labs (2013-2018)
Ph.D. Candidate / Research Assistant, Johns Hopkins University (2011-2016)
Graduate Intern, Applied Communication Sciences (2013)
Penetration Tester, University of Michigan ICPSR (2011)
Security Intern, Independent Security Evaluators (2009-2011)
Student Software Developer, Johns Hopkins University DRCC (2008-2010) Designed security architecture for a $20M digital preservation grant
Freelance Software Developer, Brandeis University Computer Repair Shop (2008)
Consulting and advisory clients span the medical device, telecommunications, semiconductor, and security industries.
Teaching Experience
2025 Intermediate Programming, Lecturer
2024 Security and Privacy in Computing, Lecturer
2023 Security and Privacy in Computing, Lecturer
2015 Introduction to Hardware Hacking, Instructor
2012-2014 Security and Privacy, Teaching Assistant
2011 Practical Cryptographic Systems, Course Assistant
Publications
P. Martin, D. Russel, M. Ben Salem, S. Checkoway, A. Rubin, “Sentinel: Secure Mode Profiling and Enforcement for Embedded Systems,” Proc. ACM/IEEE International Conference on Internet-of-Things Design and Implementation (IoTDI ‘18), 2018. (Google Scholar)
P. Martin, M. Rushanan, T. Tantillo, C. Lehmann, A. Rubin, “Applications of Secure Location Sensing in Healthcare,” Proc. ACM Conference on Bioinformatics, Computational Biology, and Health Informatics (BCB ‘16), 2016. (Google Scholar)
J. Carrigan, P. Martin, M. Rushanan, “KBID: Kerberos Bracelet Identification (Short Paper),” Financial Cryptography and Data Security (FC ‘16), Lecture Notes in Computer Science, vol. 9603, Springer, 2016. (Google Scholar)
P. Martin, M. Rushanan, S. Checkoway, M. Green, A. Rubin, “Classifying Network Protocol Implementation Versions: An OpenSSL Case Study,” Technical Report 13-01, Johns Hopkins University, December 2013. (Google Scholar)
P. Martin, A. Rubin, R. Bhatti, “Enforcing Minimum Necessary Access in Healthcare Through Integrated Audit and Access Control,” Proc. ACM Conference on Bioinformatics, Computational Biology, and Biomedical Informatics Health Informatics Symposium (BCB-HIS), September 2013. (Google Scholar)
Open-Source Contributions
Charm: A Framework for Rapid Cryptographic Prototyping (2010-2012) Contributor to Charm, an open-source rapid prototyping framework for advanced cryptographic algorithms, developed at Johns Hopkins University.
Patents
US 10,762,214 B1 — System and Method for Automatically Extracting Information from Binary Files for Use in Database Queries
US 10,230,599 B2 — System and Method for Network Traffic Profiling and Visualization
US 9,667,521 B2 — System and Method for Network Traffic Profiling and Visualization
US 8,984,583 B2 — Healthcare Privacy Breach Prevention Through Integrated Audit and Access Control
US 9,438,632 B2 — Healthcare Privacy Breach Prevention Through Integrated Audit and Access Control
Professional Committees & Standards Bodies
IEEE 7024 Working Group — “Standard for the Procurement, Verification and Validation, and Life Cycle Management of Forensic Technologies” (Current Member)
IEEE Symposium on Security and Privacy, Program Committee (Winter 2024, Summer 2024)
Current Research
A central thread in Dr. Martin’s current research is software supply-chain security: quantifying, and then reducing, the gap between a software component’s nominal version and its true vulnerability exposure — from firmware, through operating-system distributions, to language package managers.
Automated binary version extraction for NVD cross-reference based on fuzzy matching.
Automated analysis of vulnerabilities in containers and virtual appliances.
Large-scale comparison of the nature and kind of firmware vulnerabilities across and within product classes.
Quantifying vulnerability divergence and patch lead time between rolling and enterprise Linux distributions: whether rolling distributions are more secure against known and unknown CVEs, whether enterprise distributions should be based on rolling LTS packages, and whether distributions should converge on shared soft-forked package versions so that maintenance effort can be pooled rather than duplicated. A planned follow-up extends the same analysis to programming-language package managers. Related work compares musl and glibc attack surface normalized by code size and severity.
Performance analysis and optimization of local large language model inference, including forecasting of architecture and parameter-scaling trends across frontier, open-weight, and agentic models.
Use of large language models for certain types of technical research and analysis.
Use of multimodal large language models for diagnosis of disease progression.
Technical Skills
Programming & Software Development: BASH, C, C++, C#, HTML, Java, JavaScript, Objective-C, Perl, PHP, Python, Regular Expressions, SQL, XML; Ant, BitBucket, Confluence, gdb, git, GitHub, GitLab, Gradle, Jira, make, Maven, subversion, Trello, Vagrant, valgrind
Platforms & Architectures: 6502, 8051, 8080, AVR, PIC, MSP430, Z80, m68k, ARM Cortex-M, ARMv7, ARMv8, MIPS, PowerPC, SPARC, x86, x86-64; Android, ChromeOS, FreeBSD, iOS, Linux, macOS, OpenBSD, Windows
Security & Reverse Engineering: Aircrack-ng, apktool, binwalk, bulk-extractor, Burp Suite, Charles Proxy, curl, dex2jar, ftk, hashcat, IDA Pro, jad, jd-gui, Metasploit, mitmproxy, Nessus, nmap, OpenSSL, ophcrack, p0f, Scalpel, skipfish, snort, sslstrip, sslyze, Volatility, Web Scarab, wget, Wireshark
Infrastructure & Data Systems: Ansible, Docker, Hadoop, MySQL, PostgreSQL; AWS, Azure, Bhyve, KVM, LXD, QEMU, virt-manager, VMware, Xhyve
Honors, Societies, and Awards
Member, Upsilon Pi Epsilon International Computer Science Honor Society
Member, Institute for Electrical and Electronics Engineers
Member, Association for Computing Machinery
Computer Science Department Outstanding Teaching Assistant Award (2014), Johns Hopkins University
Treasurer, Upsilon Pi Epsilon (JHU Chapter)
Computer Science Department Faculty Liaison Czar, Johns Hopkins University
Student Representative, Computer Science Undergraduate Curriculum Planning Committee, Johns Hopkins University
Certifications
Six Sigma Black Belt
Six Sigma Green Belt